The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Create an incident from a result

Prev Next

You can create a incident from the Search Results Details view or from a selected result in the list of searches.

  1. In ePO - On-prem, select Menu → DLP Capture.

  2. In the Search List, find the search whose results you want to create an incident from and click the number of results link.

  3. In Search Results, either select the result and click Actions → Create Incident, or click a specific Result ID and click Actions → Create Incident.

An incident is added to the DLP Incident Manager and a link to it is added in the selected result's details.